This Privacy Policy explains how Org21 LTD (“Org21”, “we”, “us”, or “our”) collects, uses, and protects personal information when you visit our website or use our services. We have designed our service to respect your privacy and to collect as little personal information as possible.
Data minimization is central to how we build and operate. Our service is engineered to avoid collecting personal data (PII). For the service itself, the only personal information we require is your name and business (work) email address — we do not seek personal email addresses. When you request early access or contact us, we also collect the limited business and profile information you choose to provide (see Section 2). We do not seek to collect government identifiers, financial account numbers, precise location, or other sensitive personal information, and we instruct our systems and providers to minimize any personal data that may otherwise be processed.
We do not knowingly collect special categories of data or sensitive personal information.
We use the information described above to:
Where the EU or UK General Data Protection Regulation applies, we process personal information on the following legal bases:
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share personal information only as follows:
A current list of subprocessors is available on request or as provided in your agreement.
Our website uses cookies and similar technologies:
Where required, we request your consent before setting non-essential cookies, and you can manage your preferences through our cookie banner or your browser settings. Disabling some cookies may affect how the website works.
We operate primarily using infrastructure in the United States. If you access our services from outside the United States, your information may be transferred to and processed in the United States or other countries. Where we transfer personal information out of the EEA, the UK, or Switzerland, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) or another lawful transfer mechanism.
We retain personal information only for as long as necessary to fulfil the purposes described in this Policy, to provide the service, and to meet legal, accounting, or reporting obligations. Account information (your name and business email address) is retained while your account is active and for a limited period afterward, after which it is deleted or anonymized. Early-access and prospect information is retained for as long as needed to evaluate and follow up on your request, and is deleted or anonymized when it is no longer needed or when you withdraw consent. Website and analytics data is retained for a limited period consistent with our internal retention standards.
We maintain administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit and at rest, access controls on a least-privilege basis, multi-factor authentication, logging and monitoring, and a formal information security program aligned with recognized standards. No method of transmission or storage is completely secure, but we work continuously to protect your information and to improve our controls.
Depending on where you live, you may have some or all of the following rights. To exercise any right, contact us at privacy@org21.ai; we will respond within the timeframe required by applicable law and may need to verify your identity first.
You have the right to: access your personal information; request correction of inaccurate data; request erasure (“right to be forgotten”); restrict or object to processing; request portability of data you provided to us; and withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data protection supervisory authority.
If you are a California resident (and, where applicable, a resident of another US state with comparable law), you have the right to: know what personal information we collect and how we use it; request access to and deletion of your personal information; correct inaccurate personal information; and opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information, and we do not use or disclose sensitive personal information for purposes that would require an opt-out. We will not discriminate against you for exercising your rights. You may designate an authorized agent to make a request on your behalf.
Our website and services are not directed to children, and we do not knowingly collect personal information from children under the age of 16 (or the age defined as a minor in your jurisdiction). If you believe a child has provided us personal information, please contact us and we will delete it.
Our website may contain links to third-party sites and services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of our website or services after an update constitutes acceptance of the revised Policy.
If you have questions or requests regarding this Privacy Policy or your personal information, contact us at:
Org21 LTD
Email: privacy@org21.ai
Address: [postal address]
You can reach our privacy team — and submit data subject or consumer privacy requests — at privacy@org21.ai.
This document is a template provided for convenience and does not constitute legal advice. It should be reviewed and adapted by qualified legal counsel before publication to ensure it accurately reflects your data practices and complies with applicable laws in your jurisdictions.